Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
19/01/2024, 11:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
677d91018acaa3feddd2cf869e27f57a.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
677d91018acaa3feddd2cf869e27f57a.exe
Resource
win10v2004-20231215-en
4 signatures
150 seconds
General
-
Target
677d91018acaa3feddd2cf869e27f57a.exe
-
Size
11KB
-
MD5
677d91018acaa3feddd2cf869e27f57a
-
SHA1
dc40eb2407088da90ce4498ddd06e73446a325a4
-
SHA256
7e2042fb9849f551fb5a8fafd5edb139c1d02af80001a28ea26e0e798421854b
-
SHA512
33acf62a166468cdf8dcf88bb5fd0907623c43dcf51ce014ba14a4aed2fb9aa8f6f678ba37820d70719477e6c43fd7ee767ace62cbb16df50c6d8b7e37d8f898
-
SSDEEP
192:nH2lNDtBwSTvLNzT5PosSiA5hSQAGQfOM7hSYR4yBpTa+Hs:HIZtiSTvL4smXSQzQftP75dHs
Score
8/10
Malware Config
Signatures
-
Modifies Installed Components in the registry 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\Ä\StubPath = "C:\\Windows\\system32\\Ä -a" 677d91018acaa3feddd2cf869e27f57a.exe Key created \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\Ä 677d91018acaa3feddd2cf869e27f57a.exe -
resource yara_rule behavioral1/memory/2876-2-0x0000000000400000-0x0000000000408000-memory.dmp upx -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\Ä 677d91018acaa3feddd2cf869e27f57a.exe File opened for modification C:\Windows\SysWOW64\Ä 677d91018acaa3feddd2cf869e27f57a.exe